ruantiblock_openwrt/luci-app-ruantiblock/root/usr/share/rpcd/acl.d/luci-app-ruantiblock.json

{
	"luci-app-ruantiblock": {
		"description": "Grant access to ruantiblock procedures",
		"read": {
			"cgi-io": [ "exec" ],
			"file": {
				"/usr/libexec/ruantiblock": [ "list" ],
				"/etc/ruantiblock/fqdn_filter": [ "read" ],
				"/etc/ruantiblock/ip_filter": [ "read" ],
				"/etc/ruantiblock/user_lists/*": [ "read" ],
				"/etc/ruantiblock/bypass_entries": [ "read" ],
				"/etc/ruantiblock/gr_excluded_nets": [ "read" ],
				"/etc/ruantiblock/gr_excluded_sld": [ "read" ],
				"/var/run/ruantiblock.token": [ "read" ],
				"/etc/tor/torrc": [ "read" ],
				"/etc/crontabs/root": [ "read" ],
				"/usr/bin/ruantiblock*": [ "exec" ],
				"/sbin/logread -e ruantiblock:": [ "exec" ],
				"/usr/sbin/logread -e ruantiblock:": [ "exec" ],
				"/tmp": [ "list" ]
			},
			"uci": [ "network", "ruantiblock" ],
			"ubus": {
				"luci": [ "getInitList", "setInitAction" ],
				"service": [ "list" ]
			}
		},
		"write": {
			"file": {
				"/etc/ruantiblock/fqdn_filter": [ "write" ],
				"/etc/ruantiblock/ip_filter": [ "write" ],
				"/etc/ruantiblock/user_lists/*": [ "write" ],
				"/etc/ruantiblock/bypass_entries": [ "write" ],
				"/etc/ruantiblock/gr_excluded_nets": [ "write" ],
				"/etc/ruantiblock/gr_excluded_sld": [ "write" ],
				"/etc/tor/torrc": [ "write" ],
				"/etc/crontabs/root": [ "write" ]
			},
			"uci": [ "ruantiblock" ]
		}
	}
}